To understand more about ISO38500 and the Consultancy
Services we offer please call us on +44 (0)115 966 8375
ISO 38500: A new standard for IT Governance

ISO/IEC 38500 is the international standard that provides guiding principles for directors of organisations on the effective, efficient, and acceptable use of Information Technology (IT) within their organisations.

The purpose of this standard is to promote effective, efficient, and acceptable use of IT in all organisations by:

• Assuring stakeholders (including consumers, shareholders, and employees) that, if the standard is followed, they can have confidence in the organisation’s corporate governance of IT;
• Informing and guiding directors in governing the use of IT in their organisation
• Providing a basis for objective evaluation of the corporate governance of IT.

At e-Quant we have now assisted a number of high profile organisations to understand the requirements and benefits of adhering to ISO38500. If you want to know more about ISO 38500(what it is, why you should use it, how to implement it), then please contact e-Quant at: enquiries@e-quant.co.uk or call on +44 (0)115 966 8375

Who would use ISO/IEC 38500?
This standard is applicable to all organisations, including public and private companies, government entities, and not-for-profit organisations. It is applicable to organisations of all sizes from the smallest to the largest, regardless of the extent of their use of IT.

It applies to the governance of management processes (and decisions) relating to the information and communication services used by an organisation. These processes could be controlled by IT specialists within the organisation or external service providers, or by business units within the organisation.

The standard is intended to inform and guide those involved in designing and implementing the management system of policies, processes, and structures that support governance.


What are the benefits of using ISO/IEC 38500?
This standard establishes principles for the effective, efficient and acceptable use of IT. Ensuring that their organisations follow these principles will assist directors in balancing risks and encouraging opportunities arising from the use of IT. This standard establishes a model for the governance of IT.

The risk of directors not fulfilling their obligations is mitigated by giving due attention to the model in properly applying the principles. The standard establishes a vocabulary for the Governance of IT.


Contents of ISO/IEC 38500 include:

• Scope
• Application
• Objectives
• Benefits of Using This Standard
• Referenced Documents
• Definitions
• Framework for good corporate governance of IT
• Principles
• Model
• Guidance for the corporate governance of IT
• General
• Responsibility
• Strategy
• Acquisition
• Performance
• Conformance
• Human Behaviour

If you want to know more about ISO 38500, what it is, why you should use it, how to implement it, then please contact e-Quant at: enquiries@e-quant.co.uk
e-Quant - Areas of Focus
IT Service ManagementGreen ITLean ITIT GovernanceBenchmarking Optimisation